Security Directory

V

Venson Ltd

mostbetczech.com

54

Mostbet Czech is an online gambling platform offering casino games and sports betting services primarily targeting Czech players. The website is professionally designed, mobile-optimized, and provides a broad range of games and betting options, supported by a Curacao eGaming license. The technical infrastructure is modern, leveraging WordPress with SEO and caching plugins, and hosted behind Cloudflare DNS. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and some security headers. Privacy compliance is weak due to missing privacy and cookie policies. Customer support is accessible via email and contact forms, with no phone or social media contacts explicitly provided. Overall, the platform is credible and functional but could improve compliance and security transparency.

B

Bizbon N.V.

mostbet-mostbet.cz

58

Mostbet CZ operates as a sports betting and online casino platform targeting Czech Republic customers. The site offers a wide range of sports events, casino games, and mobile applications, positioning itself as a popular choice in the Czech gambling market. The business is linked to Bizbon N.V., founded in 2009, though the domain is newly registered in 2023, likely for regional targeting. Technically, the website is built on WordPress with SEO and affiliate marketing plugins, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled but lacks visible security headers and explicit privacy or cookie policies. No direct contact information is provided, which may affect user trust. Overall, the site is functional and professional but could improve compliance and security transparency.

SOiKA is a Czech Republic-based mobile application designed to facilitate efficient reporting and management of municipal issues by engaging citizens directly. The platform supports Czech and Slovak languages and is backed by ENVIPARTNER, s.r.o., a company with over 10 years of experience in grant consultancy, crisis management, and GIS solutions. The website presents a professional and consistent brand image with clear descriptions of services and target audience focused on local governments and citizens. Technically, the site uses standard modern web technologies such as Bootstrap and jQuery, with moderate performance and good mobile optimization. Security posture is moderate with HTTPS implied but lacks explicit security headers and formal security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is credible and trustworthy but could improve in security and privacy transparency.

E

ENVIPARTNER, s.r.o.

gisella.app

49

Gisella.app is a Czech-developed mobile mapping application designed for efficient field data collection, targeting municipalities, environmental researchers, sociological researchers, and educators. The app supports multiple GIS data formats and integrates with popular platforms such as Google Drive and WEGAS, positioning itself as a niche but valuable tool in the GIS and education sectors. The website reflects a professional and consistent brand presence with good content quality and user experience. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google reCAPTCHA, Hotjar, and Google Analytics, ensuring a functional and moderately performant platform. Security posture is solid with HTTPS enforced and anti-bot measures on the contact form, though it lacks explicit security headers and published security policies. Privacy compliance is limited due to missing privacy and cookie policies, which should be addressed to improve trust and regulatory adherence. Overall, the domain registration aligns well with the business claims, enhancing legitimacy. Strategic improvements in privacy documentation, security headers, and incident response transparency would elevate the site's security and compliance maturity.

O

Obec Troubsko

troubsko.cz

46

Obec Troubsko operates as the official municipal government website for the village of Troubsko in the Czech Republic. It serves local residents and visitors by providing comprehensive information about municipal services, cultural events, local history, and public notices. The website is positioned as a trusted source for community engagement and administrative communication. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies such as jQuery and Slick Carousel for interactive content. The site is mobile-optimized and presents a professional design with clear navigation. Security posture is moderate; HTTPS is implied but no explicit security headers were detected, and privacy compliance is minimal due to the absence of privacy and cookie policies. The WHOIS data is unavailable, which limits domain trust verification, but the website content and structure align with a legitimate municipal entity. Overall, the site is safe, reliable, and serves its intended audience effectively.

O

Obec Sivice

sivice.cz

53

Obec Sivice operates an official municipal website serving the local community of Sivice in the Czech Republic. The site provides comprehensive information about local government activities, community events, public services, and contact details. It targets residents and visitors seeking municipal information and services. The website is well-structured with clear navigation and multilingual support via Google Translate, enhancing accessibility for non-Czech speakers. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Swiper.js, and Leaflet.js for mapping. It uses a CMS platform provided by Galileo Corporation, indicating a professional and maintained infrastructure. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and a security.txt file, and no incident response contacts are provided. The absence of WHOIS data is a concern for domain legitimacy but does not detract from the apparent authenticity of the municipal content. Overall, the website presents a trustworthy and professional digital presence for the municipality, with minor recommendations to enhance security posture and transparency. The risk level is low, but domain registration opacity should be addressed to improve trustworthiness.

Obec Prace is the official website of the municipality of Prace in the Czech Republic, providing residents and visitors with comprehensive local government information, including news, events, official documents, and contact details. The site serves as a public service platform with a focus on community engagement and transparency. The website is well-branded with consistent municipal imagery and offers accessible content primarily in Czech. Technically, the site uses a combination of jQuery, Bootstrap, Swiper.js, and other JavaScript libraries, and is built on the Munipolis platform, which is common for municipal websites in the region. The site is mobile-friendly and includes accessibility certifications, enhancing usability for a broad audience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms but lacks visible advanced security headers or explicit incident response policies. The absence of WHOIS data limits domain trust assessment, but the official nature and content quality support legitimacy. Overall, the website is a reliable and professional municipal portal with moderate technical sophistication and good privacy compliance.

M

Městys Pozořice

pozorice.cz

55

The website pozorice.cz serves as the official online presence for the municipal government of Pozořice, Czech Republic. It provides residents and visitors with access to local government information, public notices, event calendars, and contact details for various municipal offices. The site is well-structured with clear navigation and a focus on community services, reflecting its role as a government portal. The domain's long registration history and consistent WHOIS data reinforce its legitimacy as an official municipal resource. Technically, the site employs a modern JavaScript stack including jQuery, Google reCAPTCHA, and cookie consent management, built on a Nette Framework-based CMS. While performance is moderate and mobile optimization is good, there is room for improvement in accessibility and security headers. Security posture is solid with HTTPS and spam protection, but lacks explicit security policies or incident response contacts. Privacy compliance is strong, with a clear GDPR policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

O

Obec Kovalovice

kovalovice.cz

51

Obec Kovalovice operates an official municipal website serving the local community in the Czech Republic. The site provides comprehensive information about local government activities, public services, news updates, and contact details. It targets residents and visitors seeking municipal information and services. The business model is that of a public sector local government portal, focusing on transparency and community engagement. The website maintains a consistent brand identity with the official municipal crest and provides trust signals such as official contact information and partner links. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Swiper.js, and Leaflet.js for mapping. It is built on the Galileo CMS platform, optimized for mobile devices, and includes accessibility features. The site loads with moderate performance and has good SEO practices. Privacy and cookie policies are implemented with GDPR compliance, and a cookie consent mechanism is active. From a security perspective, the site uses HTTPS with excellent SSL configuration and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policy documentation and incident response contact channels. Security headers are not explicitly detected, suggesting room for improvement in hardening the site against common web threats. Overall, the website is trustworthy, professionally maintained, and suitable for its public sector purpose. Strategic recommendations include publishing a security policy, adding incident response contacts, enhancing security headers, and continuing regular security audits to maintain compliance and protect user data.

O

Obec Kobylnice

kobylnice.cz

38

Obec Kobylnice operates an official municipal website serving the local community in the Czech Republic. The site provides residents and visitors with information about local government services, news, cultural events, and contact details. The business model is focused on public service and community engagement, positioning the municipality as a trusted local authority. Technically, the website uses a combination of Bootstrap 3, jQuery, and Fancybox, with a custom or unknown CMS platform. The site is mobile responsive and moderately optimized for performance and accessibility. Security posture is basic with HTTPS enabled but lacking important security headers and privacy compliance mechanisms such as cookie consent. WHOIS data is unavailable, which slightly reduces trust but the official branding and content support legitimacy. Overall, the website is functional and professional but could improve in security and privacy compliance.

O

Obec Blažovice

blazovice.eu

51

Obec Blažovice operates an official municipal website serving the local community of Blažovice in the Czech Republic. The site provides comprehensive information about local government, public services, events, strategic documents, and community life. It targets residents, visitors, and stakeholders interested in municipal affairs. The business model is governmental, focusing on public service and community engagement. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Swiper.js, and Leaflet.js for mapping. It uses a CMS platform from GC System, ensuring structured content management. The site is mobile-optimized, accessible, and SEO-friendly, with good performance and clear navigation. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and includes standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a published security policy and incident response contact information, which could enhance trust and preparedness. Overall, the website is trustworthy and professionally maintained, with strong compliance to privacy regulations such as GDPR. The domain WHOIS data is privacy protected by EURid, which is common and justified for municipal domains. No WAF or blocking mechanisms interfere with access, allowing full content availability. Strategic recommendations include publishing a formal security policy, adding vulnerability disclosure information, and maintaining regular security audits to ensure ongoing protection and compliance.

A

ADS Group

adsgroup.org.uk

74

ADS Group is a prominent UK trade association representing the aerospace, defence, security, and space sectors. The organization focuses on advancing leadership and enabling prosperity and sustainable growth within these critical industries. Their services include business development, security vetting, SME support, and organizing industry events, positioning them as a key player in the UK advanced engineering ecosystem. The website reflects a mature digital presence with a modern WordPress-based infrastructure, leveraging Elementor, Bootstrap, and Google Tag Manager for analytics and marketing. Security posture is solid with HTTPS and recognized certifications such as ISO 9001, ISO 27001, and Cyber Essentials Plus, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, supporting strong privacy practices. Overall, the site demonstrates high professionalism, trustworthiness, and effective communication of business objectives.

A

AED Cluster Portugal

aedportugal.pt

46

AED Cluster Portugal is a professional cluster organization representing over 150 Portuguese entities in the aeronautics, space, and defence sectors. The cluster facilitates collaboration among companies, institutes, and academia to promote growth and innovation within these industries. The website reflects a well-established market position as a leading cluster in Portugal, offering services such as networking, project promotion, and career opportunities. Technically, the website is built on WordPress with modern libraries and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is solid with HTTPS and reCAPTCHA usage, though it lacks explicit security headers and formal security policies. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the site is trustworthy and professional, with room for improvement in privacy and security transparency.

D

Dassault Aviation

dassault-aviation.com

76

Dassault Aviation is a leading French aerospace company specializing in the design, manufacture, and support of combat aircraft and business jets, including renowned brands such as Rafale, Falcon, and nEUROn. The company holds a strong market position as a major player in aeronautics with a global presence and a history dating back to 1916. The website reflects a mature digital presence with comprehensive content tailored to industry professionals, customers, and enthusiasts. Technically, the site is built on WordPress with modern analytics and tracking tools, optimized for performance and accessibility. Security posture is robust with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response details are not publicly available. Overall, the domain appears legitimate despite WHOIS privacy protection, consistent with the company's stature and security needs.

ANTONOV Company is a well-established Ukrainian aircraft manufacturing and aviation services provider, specializing in cargo and passenger airplanes and air transportation. The company holds a strong market position as a global leader in specialized cargo air transport, particularly for space components and satellite-related shipments. The website reflects a professional and consistent brand image with good content quality and navigation, targeting aviation industry professionals and customers requiring specialized air transport services. Technically, the website is built on a Yii framework with modern JavaScript libraries and is moderately optimized for performance and mobile devices. Security posture is adequate with HTTPS and CSRF protections but lacks advanced security headers and DNSSEC. Privacy and cookie policies are not present, indicating compliance gaps. Overall, the domain registration and WHOIS data support the legitimacy and trustworthiness of the company and website.

E

Exattosoft LLP

exattosoft.com

48

Exattosoft LLP operates a SaaS platform focused on rapid business website creation, targeting small to medium businesses primarily in India. The platform offers a wide range of features including unlimited pages, galleries, SEO, social integration, and hosting services, with transparent tiered pricing plans. The company has a solid market position as a provider of fast, reliable, and feature-rich website solutions, supported by clear contact information and social media presence. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, jQuery, and the Materialize framework. Hosting and DNS services leverage Cloudflare, enhancing performance and reliability. The site is mobile optimized and includes Google Analytics and Tag Manager for user tracking, though lacks a cookie consent mechanism. From a security perspective, the site uses HTTPS and has domain transfer protections, but lacks DNSSEC and important security headers like CSP and HSTS. There is no published security policy or incident response contact, which limits transparency. The absence of cookie consent and some security best practices reduces privacy compliance. Overall, the website is professional and functional with good business credibility but could improve its security posture and privacy compliance to better protect users and build trust.

Richmond, operated under Santillana Educação, is an educational content portal serving primarily Brazilian educators and students. The website offers access to educational materials, catalogs, and exclusive content, with a focus on accessibility and user experience. The portal integrates with other Santillana and Moderna educational platforms, indicating a broad ecosystem of educational services. Technically, the site uses a legacy CMS (Lumis Portal) and includes standard tracking and consent mechanisms, but relies on older JavaScript libraries which may pose security risks. Security posture is moderate with room for improvement in headers and modern best practices. Privacy compliance is basic, with cookie consent implemented but no explicit privacy policy found in the analyzed content. Overall, the site is professional, trustworthy, and safe for general audiences.

S

Santillana Educação

sistemafb.com.br

64

Sistema Farias Brito de Ensino, operated by Santillana Educação, is a leading educational platform in Brazil specializing in ENEM exam preparation. The website presents a professional and consistent brand image, targeting students and educational institutions. The business model focuses on providing comprehensive teaching systems and educational content to prepare students for academic success. Technically, the site is built on WordPress with modern integrations such as Google Tag Manager, AddThis, and RD Station, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. Overall, the site demonstrates a good balance of usability, compliance, and marketing sophistication, positioning it well in the Brazilian education sector.

S

Sdružení obcí Rýmařovska - svazek obcí

rymarovsko.cz

41

The website www.rymarovsko.cz represents the official online presence of the Sdružení obcí Rýmařovska, a regional municipal association in the Czech Republic focused on tourism and community cooperation. It provides information about the region, its municipalities, and tourism opportunities, serving residents and visitors alike. The site is built on Joomla CMS with a Helix3 framework, utilizing common web technologies such as jQuery and Bootstrap. Google Analytics is employed for visitor tracking, but no visible cookie consent or privacy policies are present, indicating gaps in privacy compliance. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks important security headers and formal security policies such as incident response or vulnerability disclosure mechanisms. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness despite the legitimate and professional appearance of the website content. Overall, the site is functional, informative, and professionally presented but would benefit from enhanced privacy compliance, security hardening, and domain registration transparency to improve trust and regulatory adherence.

S

Starflix

starflix.lv

42

Starflix is a Riga-based digital marketing agency specializing in web hosting, website development, e-commerce solutions, and digital marketing services. Established in 2014, it positions itself as a leading handmade web developer and digital marketing executor in Latvia with a broad client base. The company offers tailored solutions to help businesses succeed online, including consultation days and web design courses, indicating a focus on client education and engagement. Technically, the website is built on WordPress with common plugins like Visual Composer and LayerSlider, and integrates Facebook Pixel for marketing analytics. The site is well-designed, mobile-optimized, and provides clear navigation, although it lacks explicit cookie consent mechanisms and detailed security policies. Security posture is moderate with HTTPS enabled but missing advanced security headers and incident response information. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing privacy compliance, implementing security headers, and publishing security policies to improve trust and compliance.

Zdeněk Večeřa operates a personal technical blog focused on software development, IT tutorials, and related technology topics primarily targeting Czech-speaking audiences. The website serves as a content publishing platform with a focus on educating and informing readers about software tools, programming, and hardware. The business model is based on content publication with monetization through Google Adsense and promotion of related services. The site maintains a consistent brand presence with clear author identification and social media integration. Technically, the website is built on WordPress CMS version 6.7.2, utilizing common web technologies such as PHP, jQuery, Bootstrap, and Google Fonts. SEO is enhanced through the All in One SEO plugin and structured data in JSON-LD format. The site is mobile optimized and performs moderately well, though some improvements in accessibility and security headers could be made. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, demonstrating awareness of privacy regulations. However, the absence of key security headers and lack of visible incident response or security policies indicate room for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy front for a personal technical blog, though the lack of WHOIS data and domain registration transparency slightly reduces trustworthiness. Strategic recommendations include enhancing security headers, clarifying privacy policies, and maintaining up-to-date software to improve security posture and compliance.

A

Agence Web Marketing

poush.be

52

Agence Web Marketing, operating under the brand 'Poush', is a Belgian digital marketing agency specializing in custom WordPress website creation, SEO, digital strategy, and AI integration. The company positions itself as a growth partner for businesses seeking to enhance their online presence and conversion rates. Their service portfolio includes audits, site creation, SEO, marketing, AI services, and training. Technically, the website is built on WordPress with modern plugins and tracking tools, demonstrating a mature digital infrastructure. Security posture is solid with HTTPS, cookie consent, and anti-bot measures, though some security headers could be improved. The domain WHOIS data is restricted, which is common but reduces transparency. Overall, the site is professional, compliant with GDPR, and trustworthy, with no signs of malicious activity or adult content.

U

UrbanReport

ubytovaniceskarepublika.eu

54

UrbanReport is a Romanian online media outlet focused on urban life, lifestyle, health, and fashion topics. The website serves a general audience interested in news and analyses related to urban living. It operates as a small-scale online magazine with consistent branding and good content quality. The technical infrastructure is based on WordPress CMS with common plugins such as Yoast SEO and Contact Form 7, indicating a standard modern web platform. The site is mobile optimized and has moderate performance. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and explicit privacy and terms policies. No contact information or incident response details are provided, which limits direct communication channels. WHOIS data is privacy protected by ROTLD, which is typical for Romanian domains and does not raise immediate concerns. Overall, the site is legitimate and professionally maintained but could improve privacy compliance and security transparency.

E

eViz s.r.o.

penziony.cz

47

Penziony.cz is an established Czech online platform specializing in affordable accommodation listings including pensions, hotels, apartments, and cottages. Operated by eViz s.r.o., it targets travelers seeking budget-friendly lodging options across the Czech Republic. The website offers extensive listings with direct contact details to properties, facilitating user bookings and searches. Technically, the site is built on WordPress using the WP Rentals theme, integrating modern JavaScript libraries such as jQuery, Bootstrap, Algolia Places, and Mapy.cz APIs for enhanced user experience and search functionality. Security-wise, the site employs HTTPS and nonce tokens for form submissions, indicating a baseline security posture; however, it lacks comprehensive security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism, which may pose GDPR compliance risks. The absence of WHOIS data limits domain trust assessment, but the website content and business information appear professional and trustworthy. Overall, Penziony.cz presents a solid digital presence in the hospitality sector with room for improvement in privacy and security transparency.

S

Služby Boskovice, s.r.o.

boskovickestezky.cz

30

Boskovické stezky is a local sport and recreational facility based in Boskovice, Czech Republic, operated by Služby Boskovice, s.r.o. The website provides comprehensive information about the Boskovice trails, sportpark services, events, accommodation, and regional attractions. The target audience includes local residents and tourists interested in outdoor activities such as cycling and trail sports. The business operates primarily as a service provider for recreational activities with a focus on community engagement and regional tourism. Technically, the website uses a combination of jQuery and specialized map APIs from Mapy.cz to deliver interactive content. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation and relevant content. However, the site lacks HTTPS, which is a significant security shortfall. There are no detected privacy or cookie policies, and no advanced security headers are implemented, which impacts the overall security posture. From a security perspective, the absence of HTTPS and security headers, combined with no visible incident response or vulnerability disclosure information, indicates a low to moderate security maturity level. The WHOIS data is unavailable, which raises concerns about domain registration legitimacy and trustworthiness. Despite these issues, the website content is safe, professional, and focused on general audience recreational services. Overall, the site is functional and informative but requires urgent improvements in security and privacy compliance to enhance trust and protect user data. Verification of domain registration and implementation of HTTPS are critical to improving the website's credibility and security posture.

A

Anglo-American University in Prague

aauni.edu

72

Anglo-American University in Prague is a well-established non-profit higher education institution founded in 1990, offering dual accredited bachelor and master programs in English across diverse fields such as Business, International Relations, Humanities, and Law. The university positions itself as a leading private university in Prague with a strong international presence and multiple accreditations. The website reflects a professional and comprehensive digital presence, targeting prospective and current students, faculty, and academic partners. Technically, the site is built on WordPress with modern performance and SEO optimizations, leveraging various analytics and marketing tools while maintaining GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and cookie consent, though some HTTP security headers and formal security policies are not explicitly published. The absence of WHOIS domain registration data is a notable concern but does not detract significantly from the overall legitimacy given the rich content and trust signals. Strategic recommendations include enhancing security header implementation, publishing a security policy, and adding vulnerability disclosure information to further improve trust and compliance.

I

INVITAL

rostlinna-akvaria.cz

50

INVITAL operates the largest online aquarium retail store in the Czech Republic and Slovakia, offering a comprehensive range of aquarium products including tanks, furniture, filters, lighting, fish food, accessories, and aquatic plants. The website is professionally designed with good content quality and targets aquarium hobbyists in the region. The business model is e-commerce retail with a strong market position as a leading aquarium supplier in its geographic area. Technically, the website employs modern JavaScript libraries such as jQuery, Google Tag Manager, and Facebook SDK, with a cookie consent mechanism indicating awareness of privacy regulations. Performance and mobile optimization are good, though accessibility could be improved. Security posture is moderate with HTTPS enabled but lacking some security headers and explicit security policies. No WHOIS data was found, which impacts domain trust assessment. Overall, the site is safe, professional, and trustworthy for its audience.

K

KávaNaKlik.cz

kavanaklik.cz

48

KávaNaKlik.cz is a Czech Republic-based e-commerce website specializing in the sale of coffee and tea products. The site offers a curated selection of over 100 types of coffee and teas, providing customers with personalized coffee selection advice and home delivery services. The business model focuses on direct online retail to general consumers interested in specialty coffee and tea. The website presents a professional and consistent brand image with good content quality and user experience.

WebDesign Beroun is a small Czech Republic-based web design and development service provider specializing in creating new websites, redesigning existing ones, and programming custom online applications such as e-shops and portals. The company emphasizes design quality, usability, and ongoing content management, with a business history dating back to 1999. The website is professionally designed with clear navigation and integrates common web technologies including jQuery, Bootstrap, and Google Analytics. However, the absence of WHOIS registration data and privacy/cookie policies indicates areas for improvement in transparency and compliance. Security posture is moderate with HTTPS enabled but lacking security headers and formal policies. Overall, the website is safe, business-focused, and accessible without WAF or blocking mechanisms.

S

Santillana Chile

santillanacompartir.cl

54

Santillana Chile operates as a prominent educational solutions provider in Latin America, offering comprehensive pedagogical consultancy, digital platforms, and educational resources tailored to schools, teachers, families, and students. The website reflects a professional and consistent brand presence aligned with its parent company, Grupo Santillana de Educación Global, S.L.U. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and providing a responsive user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS data limits domain registration trust verification, but the overall digital footprint and content quality suggest a legitimate and established business. Strategic recommendations include enhancing security headers, publishing security policies, and improving direct contact availability to strengthen trust and compliance.

E

ePreselec by InfoJobs

epreselec.com

47

ePreselec by InfoJobs is a Spanish-based recruitment process management software provider offering an applicant tracking system designed to streamline and centralize candidate management. The company operates under the InfoJobs brand, indicating a strong market position within the recruitment technology sector in Spain. Their business model is SaaS-focused, targeting recruiters and HR professionals seeking efficient hiring solutions. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on WordPress with modern plugins and integrates advanced marketing and analytics tools such as Google Tag Manager and Segment Analytics. Security posture is solid with HTTPS enforced and domain locking, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is well addressed with a comprehensive cookie policy and consent mechanism via Didomi, aligning with GDPR requirements. Overall, the site demonstrates a mature digital presence with room for improvement in explicit security disclosures and DNS security.

E

Editora Moderna

moderna.com.br

72

Editora Moderna is a well-established educational publisher in Brazil, offering a wide range of educational content and services targeted at public and private schools across various educational levels. The company is part of the larger Grupo Santillana and Grupo Prisa, which strengthens its market position and credibility. The website reflects a professional and consistent brand image with good content quality and user experience tailored for educators and students. Technically, the site uses modern frameworks such as Next.js and integrates popular analytics and tracking tools like Google Analytics, Facebook Pixel, and Hotjar, hosted on AWS infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professionally maintained, suitable for its educational audience.

P

Praline

designbypraline.com

68

Praline is a well-established design studio specializing in branding, digital, and cultural design services. With over 20 years of experience, the company focuses on delivering creative solutions including brand strategy, visual identity, digital platforms, and cultural projects such as exhibitions and campaigns. Their market position is that of a boutique, client-focused studio with a strong portfolio and consistent branding. Technically, the website is built on WordPress using modern libraries like jQuery and Advanced Custom Fields Pro, with Matomo analytics implemented in a privacy-conscious manner (cookies disabled). The site is moderately performant and mobile-optimized, though accessibility features are basic. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

U

Unified A/R

gounified.com

59

Unified A/R is a technology company specializing in cloud-based modular accounts receivable and payment acceptance solutions tailored for wholesaler-distributors and B2B businesses. Their platform automates order-to-cash workflows, aiming to reduce costs and accelerate payment processes. The company positions itself as a trusted partner with endorsements from recognized industry groups and offers seamless ERP integration and PCI compliance features. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the website is built on WordPress using modern plugins such as WPBakery, Yoast SEO, and Gravity Forms. It employs Google Analytics, Google Tag Manager, and LinkedIn Insight for analytics and marketing. The site uses HTTPS with good SSL configuration, though lacks some advanced security headers. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site shows good practices like HTTPS enforcement and no visible sensitive data exposure. However, it lacks visible privacy and cookie policies, security policies, and incident response contacts, which are important for compliance and trust. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content itself is professional and detailed. Overall, the site presents a credible business front with solid technical infrastructure but would benefit from enhanced transparency in privacy, security policies, and domain registration information to improve trust and compliance posture.

深圳市达妙科技有限公司是一家成立于2019年的中国科技公司，专注于智能电机及驱动解决方案，产品广泛应用于机器人及自动化领域。公司提供多款关节电机、轮毂电机及开发套件，面向机器人制造商和科技竞赛团队，拥有一定的市场认可度。技术基础包括使用主流前端库和自建CMS，网站设计专业且移动优化良好。安全方面，网站缺乏HTTPS支持和安全头，且未发现隐私政策或安全事件响应机制，存在一定安全风险。WHOIS信息缺失，域名注册状态不明，影响整体信任度。建议尽快部署HTTPS，完善隐私合规和安全策略，提升整体安全与合规水平。

F

FitRuha.hu

fitruha.hu

48

FitRuha.hu is a specialized e-commerce retailer focused on fitness apparel, offering a curated selection of well-known brands such as NEBBIA, MOTIVATED, ADIDAS, and others. The website targets fitness enthusiasts primarily in Hungary and nearby regions, providing fast delivery and customer-friendly policies including free returns. The business operates since 2015, positioning itself as a niche player in the fitness clothing market with a consistent brand presence and clear contact channels. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, Facebook Pixel, and other marketing and analytics tools. It uses a proprietary or custom CMS platform (Shopion.cz) and demonstrates good mobile optimization and SEO practices. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and includes CSRF tokens in forms, alongside a comprehensive cookie consent mechanism compliant with GDPR. However, security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected, suggesting potential areas for enhancement. No vulnerabilities or exposed sensitive data were found. Overall, the website presents a low-risk profile with strong privacy compliance and business credibility. Strategic recommendations include improving security headers, enhancing accessibility, and considering a formal vulnerability disclosure policy to further strengthen security posture.

The website www.blansko.eu serves as the official municipal and tourism portal for the town of Blansko in the Czech Republic. It provides visitors with information about local attractions, cultural sites, accommodation, and services, positioning itself as a gateway to the Moravian Karst region. The site targets tourists, families, and visitors interested in natural and historical sites, offering a well-structured and content-rich experience. The business model is focused on municipal information dissemination and tourism promotion, with a clear regional government affiliation. Technically, the website uses a combination of jQuery libraries, Google Tag Manager, and third-party APIs such as Mapy.cz for mapping services. The site includes a cookie consent mechanism compliant with GDPR requirements, although no explicit privacy policy or terms of service pages were found. The technical implementation is moderate with room for improvement in mobile optimization and accessibility. From a security perspective, the site lacks visible security headers and advanced configurations such as CSP or HSTS. HTTPS usage is assumed but not explicitly confirmed in the provided data. The absence of WHOIS data is due to EURid privacy policies and does not indicate suspicious activity. Overall, the security posture is average with recommendations to enhance header security and incident response readiness. The overall risk assessment is low to moderate, with the site appearing legitimate and professionally maintained. Strategic recommendations include implementing comprehensive privacy and security policies, improving technical security measures, and enhancing mobile and accessibility features to strengthen trust and compliance.

The website www.blanensko.cz serves as the official regional tourism portal for the Moravský kras and Blanensko region in the Czech Republic. It provides comprehensive information on local attractions, cultural events, accommodations, and recreational activities, targeting tourists and visitors interested in exploring this notable karst region. The site is branded consistently with official city identity and links to multiple regional partner sites, enhancing its credibility and utility as a tourism resource. Technically, the website employs common web technologies such as jQuery, Google Tag Manager, and cookie consent scripts to manage analytics and user privacy. The site is mobile-optimized with a clear navigation structure and good content quality. However, no CMS or hosting provider details are explicitly identified, and performance is moderate. SEO and accessibility are basic but adequate for the target audience. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks visible security headers and explicit security or incident response policies. No WHOIS data is available for the domain, which raises some concerns about domain registration transparency, though the website content and official branding mitigate this risk somewhat. No vulnerabilities or sensitive data exposures were detected. Overall, the site is a trustworthy and useful regional tourism portal with room for improvement in security posture and domain registration transparency. Strategic recommendations include enhancing security headers, publishing detailed privacy and security policies, and investigating the missing WHOIS data to ensure domain legitimacy.

K

Knihovna Matěje Josefa Sychry

knihzdar.cz

55

Knihovna Matěje Josefa Sychry Žďár nad Sázavou is a well-established public library serving the community with a broad range of lending services including books, magazines, board games, e-books, music, and films. It also organizes cultural and educational events targeting children, adults, and seniors. The library operates as a contributory organization under the city of Žďár nad Sázavou and has a historical legacy dating back to 1848. The website reflects a professional and user-friendly digital presence with clear navigation and comprehensive content relevant to its audience. Technically, the website employs modern web technologies such as jQuery, Bootstrap, Google Fonts, and Google Analytics for tracking. It is mobile-optimized and uses HTTPS for secure communications. The site includes cookie consent mechanisms aligned with GDPR requirements and structured data for enhanced SEO. However, there is room for improvement in security headers and explicit security policy disclosures. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent management. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is likely due to privacy protection, which is reasonable for a public institution. Overall, the site maintains a solid security posture but could benefit from additional transparency in security policies and incident response information. The overall risk assessment is low, with the site providing trustworthy and relevant services to its community. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance to further strengthen the site's security and user trust.

V

Velké Dářko - Přírodní koupaliště - Žďárské Vrchy.cz

velkedarko.eu

52

The website zdarskevrchy.cz is a regional tourism portal focused on the Velké Dářko pond and surrounding natural attractions in the Czech Republic. It provides detailed information about the pond's history, recreational activities, events, and maps. The site targets general tourists, hikers, and water sports enthusiasts in the Vysočina region. Technically, the site uses a modern tech stack including Bootstrap, jQuery, FontAwesome, and integrates Google Fonts and Seznam Mapy.cz for mapping. It also employs Google Analytics and Facebook SDK for tracking and social sharing. Security posture is moderate with HTTPS usage and cookie consent, but lacks security headers and uses a deprecated map SDK. Privacy compliance is limited due to absence of a privacy policy and terms of service. Business credibility is moderate with consistent branding and relevant content but lacks explicit contact or company registration information. Overall, the site is functional and informative but could improve in security and privacy compliance.

HITRUST is a globally recognized leader in cybersecurity assurance, providing organizations with frameworks, certifications, and tools to manage information risk effectively. Their HITRUST Assurance Program and HITRUST CSF framework are widely adopted across industries, especially in healthcare and technology sectors. The website reflects a mature, well-established organization with a strong market position and comprehensive service offerings including third-party risk management, cyber insurance, and AI security assessments. Technically, the site is built on HubSpot CMS with modern libraries and analytics integrations, offering good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS and secure form handling, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site projects high professionalism and trustworthiness, supported by testimonials and case studies.

C

Certn Holdings Inc

certn.co

64

Certn Holdings Inc operates a sophisticated B2B SaaS platform specializing in background screening and identity verification services. Founded in 2016 and headquartered in Canada, Certn positions itself as a market leader offering fast, scalable, and global screening solutions tailored for enterprises and SMBs. The website reflects a mature digital presence with comprehensive service offerings, strong branding, and clear calls to action targeting HR and recruitment professionals. Technically, the site is built on WordPress with a modern tech stack integrating multiple analytics, marketing, and customer support tools, ensuring robust performance and user experience. Security posture is solid with HTTPS enforced and domain transfer protections, though some enhancements like DNSSEC and explicit security headers could improve resilience. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Certn demonstrates high business credibility and digital maturity, supporting its market position as a trusted screening provider.

C

C2FO

c2fo.com

62

C2FO is a well-established enterprise-level finance company founded in 2011, specializing in working capital solutions that enable businesses worldwide to optimize cash flow through early invoice payments and flexible capital access. The company holds a strong market position with a global footprint, serving over 160 countries and partnering with Fortune 100 companies. Their patented Name Your Rate® technology and suite of services such as Early Pay, Invoice Central, and Dynamic Supplier Finance demonstrate innovation and leadership in the finance sector. Technically, the website is built on a modern WordPress platform with advanced performance and SEO optimizations, leveraging trusted analytics and marketing tools while maintaining good mobile responsiveness and accessibility. Security posture is solid with HTTPS, security headers, and domain protections, though minor improvements like enabling DNSSEC and publishing a security policy could enhance trust further. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a professional, trustworthy, and mature digital presence aligned with the company's business credibility and market stature.

Fakultní nemocnice Brno is a prominent public healthcare institution in the Czech Republic, providing comprehensive medical services including adult and pediatric care, maternity, emergency services, and clinical research. The website reflects a well-established organization with a strong market position in the South Moravian region. The digital infrastructure employs modern web technologies such as Bootstrap, Font Awesome, and Google Tag Manager, with a custom or Nette-based CMS. The site is mobile-optimized, accessible, and SEO-friendly, offering clear navigation and rich content relevant to patients, medical professionals, and the public. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is robust, with detailed policies and a dedicated data protection officer contact. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility.

Kannegiesser operates as a global manufacturing company specializing in industrial laundry and textile processing solutions. The website reflects a professional B2B business model targeting industrial laundry businesses worldwide, supported by a global country selector indicating international reach. The technical infrastructure is based on TYPO3 CMS with Bootstrap for responsive design and Matomo analytics integrated with a cookie consent mechanism, demonstrating a moderate level of digital maturity. Security posture is adequate with consent-based analytics but lacks visible security headers and published privacy or terms policies, indicating room for improvement in compliance and security transparency. The absence of WHOIS registration data is a notable concern, reducing trustworthiness despite the professional website presentation. Overall, the site is functional and business-focused but would benefit from enhanced security practices, clearer compliance documentation, and verified domain registration details to improve trust and reduce risk.

L

Letterjuice

letterjuice.cat

54

Letterjuice is a small, specialized type foundry based in Spain, founded in 2013. The company focuses on type design and lettering across multiple scripts including Latin, Arabic, Greek, Cyrillic, Hebrew, and Thai. Their market position is niche, targeting designers, typographers, and educators interested in multilingual typography. The website is professionally designed with good content quality and clear navigation, supporting their business model of selling typefaces and custom lettering services. Technically, the site uses modern JavaScript libraries such as jQuery and GSAP, and is hosted by Arsys. Performance and mobile optimization are good, though accessibility is basic. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness.

R

Radek Łukasiewicz

radluka.com

56

RadLuka is a small-scale font foundry website operated by Radek Łukasiewicz, offering a curated collection of unique fonts and lettering services targeted at designers and creative professionals. The website is professionally designed using Webflow and integrates modern font management technologies such as fontdue. The business model centers on e-commerce sales of font licenses with free trial options, positioning itself as a niche player in the typography market. Technically, the site leverages Webflow CMS and CDN hosting, with JavaScript libraries including jQuery and fontdue for font rendering and cart functionality. The website performs well with good mobile optimization and clear navigation, though accessibility and SEO optimizations are basic. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which are recommended for GDPR compliance. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, impacting overall trust. No vulnerabilities or exposed sensitive data were found, but publishing security policies and incident response information would strengthen security posture. Overall, RadLuka presents a professional and focused online presence for font sales but should improve domain registration transparency, security headers, and privacy compliance to enhance trust and security maturity.

I

Ingenta

ingentaconnect.com

60

Ingenta Connect operates as a digital platform providing access to a vast collection of academic and professional research content. The website serves publishers, researchers, and librarians globally, offering services such as content hosting, subscription management, document delivery, and enhanced search capabilities. With over 25 years in the industry, Ingenta Connect has established a significant market presence, reaching 1.6 million users across 195 countries and generating 33 million annual page views. The platform emphasizes user-friendly navigation and professional content presentation to support scholarly communication. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Analytics, and Google Tag Manager, hosted behind Cloudflare infrastructure. The site demonstrates good mobile optimization and moderate performance, with a clean and accessible design. Security measures include HTTPS enforcement and secure login mechanisms, with support for federated authentication via OpenAthens and Shibboleth. However, the absence of explicit security headers and a published security policy indicates room for improvement in security posture. From a security perspective, the website shows a mature stance with encrypted communications and secure forms, but lacks visible incident response contacts or vulnerability disclosure mechanisms. The missing WHOIS registration data is a notable anomaly, reducing domain trustworthiness despite the professional and legitimate business presence. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. Overall, Ingenta Connect presents a trustworthy and professional platform for academic content distribution, with strong business credibility and good technical implementation. Strategic enhancements in security transparency and domain registration clarity would further strengthen its risk profile and stakeholder confidence.

H

Hoermann

hoermann-akademie.com

62

Hoermann-Akademie is an educational platform affiliated with the Hoermann brand, providing training and knowledge resources primarily targeting professionals and learners in Germany. The website uses modern web technologies including Vue.js, Bootstrap 5, and Kendo UI, indicating a moderate level of digital maturity. The site is mobile optimized and moderately performant but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is legitimate and professionally branded but could improve in privacy and security practices to better align with GDPR and industry standards.

W

WebP to PNG Converter Online

webptopngonline.com

39

The website www.webptopngonline.com offers a free online service for converting WebP images to PNG format, along with other related image format conversion tools such as WebP to JPG, JPG to WebP, and PNG to WebP. It targets web users, developers, and designers who require quick and easy image format conversions. The business model appears to be based on providing free utility services, likely monetized through advertising and traffic. The site is small in scale and focused on a niche utility function within the technology sector. Technically, the website employs a modern frontend stack including HTML5, CSS3, JavaScript, jQuery, Bootstrap, and various UI libraries such as Owl Carousel and SlickNav. It uses HTTPS and includes basic SEO and mobile optimization features. However, accessibility features are basic, and no CMS or hosting provider information is evident. Performance is moderate, with room for improvement in security headers and compliance features. From a security perspective, the site uses HTTPS but lacks visible security headers such as Content-Security-Policy or HSTS. There is no evidence of privacy or cookie policies, vulnerability disclosure, or incident response contacts, which are important for compliance and trust. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and ownership transparency. No adult or questionable content is present, and the site is safe for general audiences. Overall, the website is functional and provides a useful service but has gaps in privacy compliance, security best practices, and domain registration transparency. These issues reduce trustworthiness and could impact user confidence. Strategic improvements in these areas would enhance the site's credibility and security posture.